bb854958aa6957e63f2acd6454912542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb854958aa6957e63f2acd6454912542
Size

792KB
MD5

bb854958aa6957e63f2acd6454912542
SHA1

dd9abe239c5f4cb434ad3caa15fd7a0eb4f3f760
SHA256

99fb3f1b6412ac86ba2acd2d63a29c211dce86665409e41fd30720035ca7dfdf
SHA512

7ab40d815e5f63e0501eacbef3f32047e991e6283b014a9e97607ef9fa82d06e56677e8eaf4f81f4e10d3101d056f881b43c4ce8617f8c807a7ff8ca17c18a1f
SSDEEP

24576:0y40ibeI8NnOPhLAM4d9cYnacVMXjT7ctBzlS:jdpCbicYn6j8tBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb854958aa6957e63f2acd6454912542

Files

bb854958aa6957e63f2acd6454912542
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ